@betterportal/framework 0.0.1

package/lib/runtime/configTicket.js

@@ -0,0 +1,168 @@
+import jwt from "jsonwebtoken";
+import jwksClient from "jwks-rsa";
+import { ServiceConfigTicketClaimsSchema } from "../contracts/serviceConfig.js";
+import { uuidv7 } from "./uuid.js";
+const ALLOWED_ALGORITHM = "RS256";
+const ALLOWED_TYP = "JWT";
+const KID_PATTERN = /^[A-Za-z0-9_-]+$/;
+/** Audience every BetterPortal service-config ticket is minted for. */
+export const CONFIG_TICKET_AUDIENCE = "betterportal-service-config";
+/**
+ * Mint a config ticket as an RS256 JWT signed by the control plane's key.
+ * Replaces the legacy symmetric HMAC ticket - services verify it against the
+ * CP JWKS, so no shared secret is required and only the CP can issue tickets.
+ */
+export function signServiceConfigTicket(options) {
+    const now = Math.floor(Date.now() / 1000);
+    const claims = ServiceConfigTicketClaimsSchema.parse({
+        iss: options.issuer,
+        aud: [CONFIG_TICKET_AUDIENCE],
+        sub: options.subject ?? "betterportal-control-plane",
+        exp: now + options.expiresInSeconds,
+        iat: now,
+        jti: options.jti ?? uuidv7(),
+        realm: "control-plane",
+        tenantId: options.tenantId,
+        serviceId: options.serviceId,
+        ...(options.bindingId ? { bindingId: options.bindingId } : {}),
+        actions: options.actions
+    });
+    return jwt.sign(claims, options.privateKeyPem, {
+        algorithm: ALLOWED_ALGORITHM,
+        keyid: options.kid,
+        header: { alg: ALLOWED_ALGORITHM, typ: ALLOWED_TYP, kid: options.kid }
+    });
+}
+const clientCache = new Map();
+const CLIENT_CACHE_TTL_MS = 30 * 60 * 1000;
+function getJwksClient(jwksUri, issuer) {
+    const cacheKey = `${issuer}|${jwksUri}`;
+    const now = Date.now();
+    const existing = clientCache.get(cacheKey);
+    if (existing && now - existing.lastUsed < CLIENT_CACHE_TTL_MS) {
+        existing.lastUsed = now;
+        return existing.client;
+    }
+    const client = jwksClient({
+        jwksUri,
+        cache: true,
+        cacheMaxAge: 10 * 60 * 1000,
+        rateLimit: true,
+        jwksRequestsPerMinute: 30,
+        timeout: 5000
+    });
+    clientCache.set(cacheKey, { client, lastUsed: now });
+    return client;
+}
+/**
+ * Verify a CP-signed config ticket against the CP JWKS. Throws on any failure.
+ * Pins RS256, rejects jku/x5u key references, and re-checks iss/aud/exp/serviceId
+ * after library verification (defence in depth).
+ */
+export async function verifyServiceConfigTicket(token, options) {
+    if (typeof token !== "string" || token.length === 0) {
+        throw new Error("Config ticket is empty");
+    }
+    const parts = token.split(".");
+    if (parts.length !== 3) {
+        throw new Error("Config ticket must have exactly three parts");
+    }
+    const header = parseHeader(parts[0]);
+    if (header.alg !== ALLOWED_ALGORITHM) {
+        throw new Error(`Algorithm not allowed: ${String(header.alg)}`);
+    }
+    if (header.typ !== ALLOWED_TYP) {
+        throw new Error(`Ticket typ not allowed: ${String(header.typ)}`);
+    }
+    if ("jku" in header || "x5u" in header) {
+        throw new Error("Ticket header contains untrusted reference (jku/x5u)");
+    }
+    const kid = header.kid;
+    if (typeof kid !== "string" || !KID_PATTERN.test(kid) || kid.length > 256) {
+        throw new Error("Invalid kid");
+    }
+    let publicKeyPem;
+    if (options.keyResolver) {
+        publicKeyPem = await options.keyResolver(kid);
+    }
+    else if (options.jwksUri) {
+        publicKeyPem = (await getJwksClient(options.jwksUri, options.issuer).getSigningKey(kid)).getPublicKey();
+    }
+    else {
+        throw new Error("verifyServiceConfigTicket requires either jwksUri or keyResolver");
+    }
+    let verified;
+    try {
+        verified = jwt.verify(token, publicKeyPem, {
+            algorithms: [ALLOWED_ALGORITHM],
+            issuer: options.issuer,
+            audience: CONFIG_TICKET_AUDIENCE,
+            clockTolerance: options.clockToleranceSeconds ?? 0,
+            complete: false
+        });
+    }
+    catch (error) {
+        throw new Error(`Config ticket verification failed: ${error.message}`);
+    }
+    if (!verified || typeof verified !== "object") {
+        throw new Error("Config ticket verifier returned non-object claims");
+    }
+    const claims = ServiceConfigTicketClaimsSchema.parse(verified);
+    const now = Math.floor(Date.now() / 1000);
+    const tolerance = options.clockToleranceSeconds ?? 0;
+    if (claims.exp <= now - tolerance) {
+        throw new Error("Config ticket expired (manual re-check)");
+    }
+    if (claims.iss !== options.issuer) {
+        throw new Error(`Config ticket issuer mismatch (manual re-check) (${claims.iss} != ${options.issuer}`);
+    }
+    const auds = Array.isArray(claims.aud) ? claims.aud : [claims.aud];
+    if (!auds.includes(CONFIG_TICKET_AUDIENCE)) {
+        throw new Error(`Config ticket audience mismatch (manual re-check) (${CONFIG_TICKET_AUDIENCE} != ${auds.join(',')})`);
+    }
+    if (claims.serviceId !== options.serviceId) {
+        throw new Error(`Config ticket serviceId mismatch (manual re-check) (${claims.serviceId} != ${options.serviceId})`);
+    }
+    return claims;
+}
+/**
+ * Build a `validateTicket` callback for `registerServiceConfigRoutes` that
+ * verifies CP-signed tickets against the CP JWKS. Returns null (not throw) on
+ * any failure so the route responds 401 rather than 500.
+ */
+export function createCpConfigTicketValidator(options) {
+    return async (ticketValue) => {
+        if (!ticketValue)
+            return null;
+        try {
+            return await verifyServiceConfigTicket(ticketValue, options);
+        }
+        catch {
+            return null;
+        }
+    };
+}
+export function clearConfigTicketJwksCache() {
+    clientCache.clear();
+}
+function parseHeader(encodedHeader) {
+    let json;
+    try {
+        json = Buffer.from(encodedHeader, "base64url").toString("utf8");
+    }
+    catch {
+        throw new Error("Config ticket header is not valid base64url");
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(json);
+    }
+    catch {
+        throw new Error("Config ticket header is not valid JSON");
+    }
+    if (!parsed || typeof parsed !== "object") {
+        throw new Error("Config ticket header is not an object");
+    }
+    return parsed;
+}
+//# sourceMappingURL=configTicket.js.map

package/lib/runtime/configTicket.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"configTicket.js","sourceRoot":"","sources":["../../src/runtime/configTicket.ts"],"names":[],"mappings":"AAAA,OAAO,GAAG,MAAM,cAAc,CAAC;AAC/B,OAAO,UAA+B,MAAM,UAAU,CAAC;AACvD,OAAO,EACL,+BAA+B,EAGhC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAEnC,MAAM,iBAAiB,GAAG,OAAgB,CAAC;AAC3C,MAAM,WAAW,GAAG,KAAc,CAAC;AACnC,MAAM,WAAW,GAAG,kBAAkB,CAAC;AAEvC,uEAAuE;AACvE,MAAM,CAAC,MAAM,sBAAsB,GAAG,6BAA6B,CAAC;AAoBpE;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAAuC;IAC7E,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,+BAA+B,CAAC,KAAK,CAAC;QACnD,GAAG,EAAE,OAAO,CAAC,MAAM;QACnB,GAAG,EAAE,CAAC,sBAAsB,CAAC;QAC7B,GAAG,EAAE,OAAO,CAAC,OAAO,IAAI,4BAA4B;QACpD,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,gBAAgB;QACnC,GAAG,EAAE,GAAG;QACR,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,MAAM,EAAE;QAC5B,KAAK,EAAE,eAAe;QACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC,IAAI,CAAC,MAAgB,EAAE,OAAO,CAAC,aAAa,EAAE;QACvD,SAAS,EAAE,iBAAiB;QAC5B,KAAK,EAAE,OAAO,CAAC,GAAG;QAClB,MAAM,EAAE,EAAE,GAAG,EAAE,iBAAiB,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;KACvE,CAAC,CAAC;AACL,CAAC;AASD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAwB,CAAC;AACpD,MAAM,mBAAmB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE3C,SAAS,aAAa,CAAC,OAAe,EAAE,MAAc;IACpD,MAAM,QAAQ,GAAG,GAAG,MAAM,IAAI,OAAO,EAAE,CAAC;IACxC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC3C,IAAI,QAAQ,IAAI,GAAG,GAAG,QAAQ,CAAC,QAAQ,GAAG,mBAAmB,EAAE,CAAC;QAC9D,QAAQ,CAAC,QAAQ,GAAG,GAAG,CAAC;QACxB,OAAO,QAAQ,CAAC,MAAM,CAAC;IACzB,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC;QACxB,OAAO;QACP,KAAK,EAAE,IAAI;QACX,WAAW,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;QAC3B,SAAS,EAAE,IAAI;QACf,qBAAqB,EAAE,EAAE;QACzB,OAAO,EAAE,IAAI;KACd,CAAC,CAAC;IACH,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;IACrD,OAAO,MAAM,CAAC;AAChB,CAAC;AAcD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,KAAa,EACb,OAAyC;IAEzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACrC,IAAI,MAAM,CAAC,GAAG,KAAK,iBAAiB,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,KAAK,WAAW,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,2BAA2B,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,MAAM,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;IACvB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;IACjC,CAAC;IAED,IAAI,YAAoB,CAAC;IACzB,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QACxB,YAAY,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAChD,CAAC;SAAM,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,YAAY,GAAG,CAAC,MAAM,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC;IAC1G,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACtF,CAAC;IAED,IAAI,QAAiB,CAAC;IACtB,IAAI,CAAC;QACH,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,YAAY,EAAE;YACzC,UAAU,EAAE,CAAC,iBAAiB,CAAC;YAC/B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,sBAAsB;YAChC,cAAc,EAAE,OAAO,CAAC,qBAAqB,IAAI,CAAC;YAClD,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,sCAAuC,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,MAAM,GAAG,+BAA+B,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAE/D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,OAAO,CAAC,qBAAqB,IAAI,CAAC,CAAC;IACrD,IAAI,MAAM,CAAC,GAAG,IAAI,GAAG,GAAG,SAAS,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,oDAAoD,MAAM,CAAC,GAAG,OAAO,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACzG,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACnE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,sDAAsD,sBAAsB,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACxH,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,uDAAuD,MAAM,CAAC,SAAS,OAAO,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;IACtH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,6BAA6B,CAC3C,OAAyC;IAEzC,OAAO,KAAK,EAAE,WAA0B,EAAE,EAAE;QAC1C,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC;QAC9B,IAAI,CAAC;YACH,OAAO,MAAM,yBAAyB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B;IACxC,WAAW,CAAC,KAAK,EAAE,CAAC;AACtB,CAAC;AAED,SAAS,WAAW,CAAC,aAAqB;IACxC,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,MAAiC,CAAC;AAC3C,CAAC"}

package/lib/runtime/h3.d.ts

@@ -0,0 +1,28 @@
+import { JsonValue } from "../contracts/json.js";
+import { type BetterPortalObservability, type ObservabilityAttributes } from "../contracts/observability.js";
+import { type HeaderMap } from "./http.js";
+import { type NegotiatedViewResponse } from "./view.js";
+export type BetterPortalEvent = import("h3").H3Event;
+export type BetterPortalH3App = import("h3").H3;
+type BetterPortalCorsOptions = import("h3").CorsOptions;
+export interface BetterPortalAppOptions {
+    createRequestObservability?: (name: string, attributes: ObservabilityAttributes) => BetterPortalObservability;
+}
+export declare function eventObservability(event: BetterPortalEvent): BetterPortalObservability | undefined;
+/**
+ * The direct socket peer IP of the request - i.e. NOT derived from
+ * X-Forwarded-For. Use this to decide whether a request actually arrived from a
+ * trusted upstream proxy before honouring any proxy-supplied headers.
+ */
+export declare function getEventPeerIp(event: BetterPortalEvent): string | undefined;
+export declare function createBetterPortalApp(options?: BetterPortalAppOptions): BetterPortalH3App;
+export declare function createBetterPortalNodeHandler(app: BetterPortalH3App): import("h3").NodeHandler;
+export declare function eventHeaders(event: BetterPortalEvent): HeaderMap;
+export declare function acceptHeaderFromEvent(event: BetterPortalEvent): string | undefined;
+export declare function jsonResponse(body: JsonValue, status?: number, headers?: HeadersInit): Response;
+export declare function htmlResponse(body: string, status?: number, contentType?: string, headers?: HeadersInit): Response;
+export declare function negotiatedResponseToWebResponse(negotiated: NegotiatedViewResponse): Response;
+export declare function handleCorsRequest(event: BetterPortalEvent, options: BetterPortalCorsOptions): Response | false;
+export declare function withObservedEvent<T>(event: BetterPortalEvent, observability: BetterPortalObservability, name: string, handler: (event: BetterPortalEvent, span: BetterPortalObservability) => Promise<T> | T, attributes?: ObservabilityAttributes): Promise<T>;
+export {};
+//# sourceMappingURL=h3.d.ts.map

package/lib/runtime/h3.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"h3.d.ts","sourceRoot":"","sources":["../../src/runtime/h3.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EACL,KAAK,yBAAyB,EAC9B,KAAK,uBAAuB,EAC7B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAgB,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EAAE,KAAK,sBAAsB,EAAE,MAAM,WAAW,CAAC;AAExD,MAAM,MAAM,iBAAiB,GAAG,OAAO,IAAI,EAAE,OAAO,CAAC;AACrD,MAAM,MAAM,iBAAiB,GAAG,OAAO,IAAI,EAAE,EAAE,CAAC;AAChD,KAAK,uBAAuB,GAAG,OAAO,IAAI,EAAE,WAAW,CAAC;AAMxD,MAAM,WAAW,sBAAsB;IACrC,0BAA0B,CAAC,EAAE,CAC3B,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,uBAAuB,KAChC,yBAAyB,CAAC;CAChC;AAuBD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,iBAAiB,GAAG,yBAAyB,GAAG,SAAS,CAElG;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,iBAAiB,GAAG,MAAM,GAAG,SAAS,CAE3E;AAED,wBAAgB,qBAAqB,CAAC,OAAO,GAAE,sBAA2B,GAAG,iBAAiB,CAwD7F;AAED,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,iBAAiB,4BAEnE;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,iBAAiB,GAAG,SAAS,CAEhE;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,iBAAiB,GAAG,MAAM,GAAG,SAAS,CAElF;AAQD,wBAAgB,YAAY,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,SAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,QAAQ,CAQ3F;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,SAAM,EAAE,WAAW,SAAc,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,QAAQ,CAQnH;AAED,wBAAgB,+BAA+B,CAAC,UAAU,EAAE,sBAAsB,GAAG,QAAQ,CAQ5F;AAUD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,uBAAuB,GAAG,QAAQ,GAAG,KAAK,CAO9G;AAgDD,wBAAsB,iBAAiB,CAAC,CAAC,EACvC,KAAK,EAAE,iBAAiB,EACxB,aAAa,EAAE,yBAAyB,EACxC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,CAAC,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE,yBAAyB,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,EACtF,UAAU,GAAE,uBAA4B,GACvC,OAAO,CAAC,CAAC,CAAC,CAsBZ"}

package/lib/runtime/h3.js

@@ -0,0 +1,199 @@
+import { H3, getRequestIP, getRequestURL, handleCors, toNodeHandler } from "h3";
+import { toHtmlString } from "./http.js";
+function observedEventState(event) {
+    return event.__bpObservedEvent;
+}
+function byteCountFromHeader(value) {
+    if (!value)
+        return 0;
+    const parsed = Number(value);
+    return Number.isFinite(parsed) && parsed >= 0 ? parsed : 0;
+}
+function responseByteCount(response) {
+    const contentLength = byteCountFromHeader(response.headers.get("content-length"));
+    if (contentLength > 0)
+        return contentLength;
+    return 0;
+}
+export function eventObservability(event) {
+    return observedEventState(event)?.observability;
+}
+/**
+ * The direct socket peer IP of the request - i.e. NOT derived from
+ * X-Forwarded-For. Use this to decide whether a request actually arrived from a
+ * trusted upstream proxy before honouring any proxy-supplied headers.
+ */
+export function getEventPeerIp(event) {
+    return getRequestIP(event, { xForwardedFor: false }) ?? undefined;
+}
+export function createBetterPortalApp(options = {}) {
+    const app = new H3({
+        onRequest: (event) => {
+            const obs = options.createRequestObservability?.("bp.http.request", requestAttributes(event));
+            if (obs) {
+                event.__bpObservedEvent = {
+                    observability: obs,
+                    startedAt: performance.now()
+                };
+            }
+        },
+        onResponse: (response, event) => {
+            event.res.headers.forEach((value, name) => {
+                if (!response.headers.has(name))
+                    response.headers.set(name, value);
+            });
+            const state = observedEventState(event);
+            if (!state)
+                return;
+            const durationMs = roundedDuration(performance.now() - state.startedAt);
+            const requestUrl = getRequestURL(event);
+            const requestIp = getRequestIP(event, { xForwardedFor: true }) ?? "";
+            const bpContext = event;
+            const attrs = {
+                method: event.req.method,
+                path: requestUrl.pathname,
+                status: response.status,
+                durationMs,
+                callerIp: requestIp,
+                host: event.req.headers.get("host") ?? "",
+                referer: event.req.headers.get("referer") ?? "",
+                tenantId: bpContext.__bpTenantId ?? "",
+                appId: bpContext.__bpAppId ?? "",
+                requestBytes: byteCountFromHeader(event.req.headers.get("content-length")),
+                responseBytes: responseByteCount(response)
+            };
+            const message = "BP REQUEST: {method} {path} -> {status} in {durationMs}ms callerIp={callerIp} host={host} referer={referer} tenant={tenantId} app={appId} requestBytes={requestBytes} responseBytes={responseBytes}";
+            if (response.status >= 500) {
+                state.observability.logger.error(message, attrs);
+            }
+            else if (response.status >= 400) {
+                state.observability.logger.warn(message, attrs);
+            }
+            else {
+                state.observability.logger.info(message, attrs);
+            }
+            state.observability.end({
+                "http.response.status_code": response.status,
+                "duration.ms": durationMs
+            });
+        }
+    });
+    return observeRegisteredHandlers(app);
+}
+export function createBetterPortalNodeHandler(app) {
+    return toNodeHandler(app);
+}
+export function eventHeaders(event) {
+    return event.req.headers;
+}
+export function acceptHeaderFromEvent(event) {
+    return event.req.headers.get("accept") ?? undefined;
+}
+function contentTypeWithCharset(contentType) {
+    return contentType.toLowerCase().includes("charset=")
+        ? contentType
+        : `${contentType}; charset=utf-8`;
+}
+export function jsonResponse(body, status = 200, headers) {
+    return new Response(JSON.stringify(body), {
+        status,
+        headers: {
+            "content-type": "application/json; charset=utf-8",
+            ...headers
+        }
+    });
+}
+export function htmlResponse(body, status = 200, contentType = "text/html", headers) {
+    return new Response(body, {
+        status,
+        headers: {
+            "content-type": contentTypeWithCharset(contentType),
+            ...headers
+        }
+    });
+}
+export function negotiatedResponseToWebResponse(negotiated) {
+    if (negotiated.contentType.startsWith("text/html")) {
+        return htmlResponse(toHtmlString(negotiated.body ?? ""), negotiated.status, negotiated.contentType);
+    }
+    return jsonResponse(negotiated.body, negotiated.status, {
+        "content-type": contentTypeWithCharset(negotiated.contentType)
+    });
+}
+function normalizeHttpResponse(response) {
+    return new Response(response.body ?? null, {
+        status: response.status,
+        statusText: response.statusText,
+        headers: response.headers
+    });
+}
+export function handleCorsRequest(event, options) {
+    const corsResponse = handleCors(event, options);
+    if (corsResponse === false) {
+        return false;
+    }
+    return corsResponse instanceof Response ? corsResponse : normalizeHttpResponse(corsResponse);
+}
+function statusCodeFromResult(event, result) {
+    if (result instanceof Response) {
+        return result.status;
+    }
+    return event.res.status || 200;
+}
+function requestAttributes(event) {
+    const requestUrl = getRequestURL(event);
+    const requestIp = getRequestIP(event, { xForwardedFor: true });
+    return {
+        "http.request.method": event.req.method,
+        "url.full": requestUrl.toString(),
+        "url.path": requestUrl.pathname,
+        "server.address": event.req.headers.get("host") ?? "",
+        "http.request.header.referer": event.req.headers.get("referer") ?? "",
+        "network.protocol.name": requestUrl.protocol.replace(":", ""),
+        ...(requestIp ? { "client.address": requestIp } : {})
+    };
+}
+function roundedDuration(durationMs) {
+    return Math.round(durationMs * 100) / 100;
+}
+function observeRegisteredHandlers(app) {
+    const registrars = app;
+    const names = ["get", "post", "put", "patch", "delete", "options", "use"];
+    for (const name of names) {
+        const original = registrars[name].bind(app);
+        registrars[name] = (path, handler) => original(path, async (event) => {
+            const obs = eventObservability(event);
+            if (!obs)
+                return handler(event);
+            return withObservedEvent(event, obs, "bp.h3.handler", handler, {
+                "http.route": path,
+                "http.route.method": name.toUpperCase()
+            });
+        });
+    }
+    return app;
+}
+export async function withObservedEvent(event, observability, name, handler, attributes = {}) {
+    const span = observability.startSpan(name, {
+        ...requestAttributes(event),
+        ...attributes
+    });
+    try {
+        const result = await handler(event, span);
+        span.end({
+            "http.response.status_code": statusCodeFromResult(event, result)
+        });
+        return result;
+    }
+    catch (error) {
+        const normalizedError = error instanceof Error ? error : new Error(String(error));
+        span.error(normalizedError, {
+            "error.name": normalizedError.name
+        });
+        span.end({
+            "http.response.status_code": event.res.status || 500
+        });
+        throw error;
+    }
+}
+//# sourceMappingURL=h3.js.map

package/lib/runtime/h3.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"h3.js","sourceRoot":"","sources":["../../src/runtime/h3.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AAMhF,OAAO,EAAE,YAAY,EAAkB,MAAM,WAAW,CAAC;AAuBzD,SAAS,kBAAkB,CAAC,KAAwB;IAClD,OAAQ,KAA+D,CAAC,iBAAiB,CAAC;AAC5F,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAoB;IAC/C,IAAI,CAAC,KAAK;QAAE,OAAO,CAAC,CAAC;IACrB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAkB;IAC3C,MAAM,aAAa,GAAG,mBAAmB,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAClF,IAAI,aAAa,GAAG,CAAC;QAAE,OAAO,aAAa,CAAC;IAC5C,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAwB;IACzD,OAAO,kBAAkB,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC;AAClD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,KAAwB;IACrD,OAAO,YAAY,CAAC,KAAK,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,IAAI,SAAS,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,UAAkC,EAAE;IACxE,MAAM,GAAG,GAAG,IAAI,EAAE,CAAC;QACjB,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE;YACnB,MAAM,GAAG,GAAG,OAAO,CAAC,0BAA0B,EAAE,CAC9C,iBAAiB,EACjB,iBAAiB,CAAC,KAAK,CAAC,CACzB,CAAC;YACF,IAAI,GAAG,EAAE,CAAC;gBACP,KAA+D,CAAC,iBAAiB,GAAG;oBACnF,aAAa,EAAE,GAAG;oBAClB,SAAS,EAAE,WAAW,CAAC,GAAG,EAAE;iBAC7B,CAAC;YACJ,CAAC;QACH,CAAC;QACD,UAAU,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE;YAC9B,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;gBACxC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACrE,CAAC,CAAC,CAAC;YAEH,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;YACxC,IAAI,CAAC,KAAK;gBAAE,OAAO;YAEnB,MAAM,UAAU,GAAG,eAAe,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;YACxE,MAAM,UAAU,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;YACxC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;YACrE,MAAM,SAAS,GAAI,KAAkE,CAAC;YACtF,MAAM,KAAK,GAAG;gBACZ,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,MAAM;gBACxB,IAAI,EAAE,UAAU,CAAC,QAAQ;gBACzB,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,UAAU;gBACV,QAAQ,EAAE,SAAS;gBACnB,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE;gBACzC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE;gBAC/C,QAAQ,EAAE,SAAS,CAAC,YAAY,IAAI,EAAE;gBACtC,KAAK,EAAE,SAAS,CAAC,SAAS,IAAI,EAAE;gBAChC,YAAY,EAAE,mBAAmB,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;gBAC1E,aAAa,EAAE,iBAAiB,CAAC,QAAQ,CAAC;aAC3C,CAAC;YACF,MAAM,OAAO,GAAG,qMAAqM,CAAC;YAEtN,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;gBAC3B,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACnD,CAAC;iBAAM,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;gBAClC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAClD,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAClD,CAAC;YAED,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC;gBACtB,2BAA2B,EAAE,QAAQ,CAAC,MAAM;gBAC5C,aAAa,EAAE,UAAU;aAC1B,CAAC,CAAC;QACL,CAAC;KACF,CAAC,CAAC;IACH,OAAO,yBAAyB,CAAC,GAAG,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,GAAsB;IAClE,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAwB;IACnD,OAAO,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAwB;IAC5D,OAAO,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC;AACtD,CAAC;AAED,SAAS,sBAAsB,CAAC,WAAmB;IACjD,OAAO,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC;QACnD,CAAC,CAAC,WAAW;QACb,CAAC,CAAC,GAAG,WAAW,iBAAiB,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAe,EAAE,MAAM,GAAG,GAAG,EAAE,OAAqB;IAC/E,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QACxC,MAAM;QACN,OAAO,EAAE;YACP,cAAc,EAAE,iCAAiC;YACjD,GAAG,OAAO;SACX;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,MAAM,GAAG,GAAG,EAAE,WAAW,GAAG,WAAW,EAAE,OAAqB;IACvG,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;QACxB,MAAM;QACN,OAAO,EAAE;YACP,cAAc,EAAE,sBAAsB,CAAC,WAAW,CAAC;YACnD,GAAG,OAAO;SACX;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,UAAkC;IAChF,IAAI,UAAU,CAAC,WAAW,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QACnD,OAAO,YAAY,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC;IACtG,CAAC;IAED,OAAO,YAAY,CAAC,UAAU,CAAC,IAAiB,EAAE,UAAU,CAAC,MAAM,EAAE;QACnE,cAAc,EAAE,sBAAsB,CAAC,UAAU,CAAC,WAAW,CAAC;KAC/D,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAwB;IACrD,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,IAAI,EAAE;QACzC,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,OAAO,EAAE,QAAQ,CAAC,OAAO;KAC1B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAwB,EAAE,OAAgC;IAC1F,MAAM,YAAY,GAAG,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAChD,IAAI,YAAY,KAAK,KAAK,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,YAAY,YAAY,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,qBAAqB,CAAC,YAAY,CAAC,CAAC;AAC/F,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAwB,EAAE,MAAe;IACrE,IAAI,MAAM,YAAY,QAAQ,EAAE,CAAC;QAC/B,OAAO,MAAM,CAAC,MAAM,CAAC;IACvB,CAAC;IAED,OAAO,KAAK,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC;AACjC,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAwB;IACjD,MAAM,UAAU,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAE/D,OAAO;QACL,qBAAqB,EAAE,KAAK,CAAC,GAAG,CAAC,MAAM;QACvC,UAAU,EAAE,UAAU,CAAC,QAAQ,EAAE;QACjC,UAAU,EAAE,UAAU,CAAC,QAAQ;QAC/B,gBAAgB,EAAE,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE;QACrD,6BAA6B,EAAE,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE;QACrE,uBAAuB,EAAE,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC;QAC7D,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtD,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,UAAkB;IACzC,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC;AAC5C,CAAC;AAED,SAAS,yBAAyB,CAAC,GAAsB;IACvD,MAAM,UAAU,GAAG,GAAoF,CAAC;IACxG,MAAM,KAAK,GAAqC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IAE5G,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5C,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YACnE,MAAM,GAAG,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;YACtC,IAAI,CAAC,GAAG;gBAAE,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;YAChC,OAAO,iBAAiB,CAAC,KAAK,EAAE,GAAG,EAAE,eAAe,EAAE,OAAO,EAAE;gBAC7D,YAAY,EAAE,IAAI;gBAClB,mBAAmB,EAAE,IAAI,CAAC,WAAW,EAAE;aACxC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAwB,EACxB,aAAwC,EACxC,IAAY,EACZ,OAAsF,EACtF,aAAsC,EAAE;IAExC,MAAM,IAAI,GAAG,aAAa,CAAC,SAAS,CAAC,IAAI,EAAE;QACzC,GAAG,iBAAiB,CAAC,KAAK,CAAC;QAC3B,GAAG,UAAU;KACd,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,GAAG,CAAC;YACP,2BAA2B,EAAE,oBAAoB,CAAC,KAAK,EAAE,MAAM,CAAC;SACjE,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,eAAe,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAClF,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE;YAC1B,YAAY,EAAE,eAAe,CAAC,IAAI;SACnC,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC;YACP,2BAA2B,EAAE,KAAK,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG;SACrD,CAAC,CAAC;QACH,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/lib/runtime/handler.d.ts

@@ -0,0 +1,55 @@
+import type { BaseSchema, Infer } from "anyvali";
+import type { RawRouteHandler, RouteHandlerContext, RouteHandler } from "../contracts/route.js";
+/**
+ * Schema configuration for a route handler.
+ * `response` is required; `query`, `headers`, and `request` are optional.
+ */
+export interface HandlerSchemas<TResponse extends BaseSchema<unknown, unknown>, TQuery extends BaseSchema<unknown, unknown> | undefined = undefined, THeaders extends BaseSchema<unknown, unknown> | undefined = undefined, TRequest extends BaseSchema<unknown, unknown> | undefined = undefined> {
+    readonly response: TResponse;
+    readonly query?: TQuery;
+    readonly headers?: THeaders;
+    readonly request?: TRequest;
+}
+/** Resolve a schema to its inferred output type, or fall back to a default. */
+type SchemaOutput<T extends BaseSchema<unknown, unknown> | undefined, TDefault> = T extends BaseSchema<unknown, unknown> ? Infer<T> : TDefault;
+/** Fully-typed handler context derived from schema configuration. */
+type TypedHandlerContext<TSchemas extends HandlerSchemas<BaseSchema<unknown, unknown>, any, any, any>, TParams = Record<string, string>, TPlugin = unknown, TServiceConfig = Record<string, unknown>> = RouteHandlerContext<TParams, SchemaOutput<TSchemas["query"], Record<string, unknown>>, SchemaOutput<TSchemas["headers"], Record<string, string>>, SchemaOutput<TSchemas["request"], Record<string, unknown>>, TPlugin, TServiceConfig>;
+/**
+ * Create a type-safe route handler with framework-enforced validation.
+ *
+ * - TypeScript enforces the return type matches `Infer<ResponseSchema>` at compile time.
+ * - At runtime, the response is validated through `schemas.response.parse()` as a safety net.
+ * - The handler's `ctx` is fully typed from the provided schemas - no manual `.parse()` needed.
+ *
+ * @example
+ * ```ts
+ * export const handleGet = createHandler(
+ *   { response: ResponseSchema, query: QuerySchema },
+ *   (ctx) => ({
+ *     greeting: `Hello, ${ctx.query.name}`,
+ *     themeHint: "bootstrap1",
+ *     supports: ["application/json", "text/html"]
+ *   })
+ * );
+ * ```
+ */
+export declare function createHandler<TResponse extends BaseSchema<unknown, unknown>, TQuery extends BaseSchema<unknown, unknown> | undefined = undefined, THeaders extends BaseSchema<unknown, unknown> | undefined = undefined, TRequest extends BaseSchema<unknown, unknown> | undefined = undefined, TParams = Record<string, string>, TPlugin = unknown, TServiceConfig = Record<string, unknown>>(schemas: HandlerSchemas<TResponse, TQuery, THeaders, TRequest>, handler: (ctx: TypedHandlerContext<HandlerSchemas<TResponse, TQuery, THeaders, TRequest>, TParams, TPlugin, TServiceConfig>) => Infer<TResponse> | Promise<Infer<TResponse>>): RouteHandler<TParams, SchemaOutput<TQuery, Record<string, unknown>>, SchemaOutput<THeaders, Record<string, string>>, SchemaOutput<TRequest, Record<string, unknown>>, Infer<TResponse>, TPlugin, TServiceConfig>;
+export declare namespace createHandler {
+    function forContext<TPlugin = unknown, TServiceConfig = Record<string, unknown>>(): <TResponse extends BaseSchema<unknown, unknown>, TQuery extends BaseSchema<unknown, unknown> | undefined = undefined, THeaders extends BaseSchema<unknown, unknown> | undefined = undefined, TRequest extends BaseSchema<unknown, unknown> | undefined = undefined, TParams = Record<string, string>>(schemas: HandlerSchemas<TResponse, TQuery, THeaders, TRequest>, handler: (ctx: TypedHandlerContext<HandlerSchemas<TResponse, TQuery, THeaders, TRequest>, TParams, TPlugin, TServiceConfig>) => Infer<TResponse> | Promise<Infer<TResponse>>) => RouteHandler<TParams, SchemaOutput<TQuery, Record<string, unknown>>, SchemaOutput<THeaders, Record<string, string>>, SchemaOutput<TRequest, Record<string, unknown>>, Infer<TResponse>, TPlugin, TServiceConfig>;
+}
+export type RawHandlerSchemas<TQuery extends BaseSchema<unknown, unknown> | undefined = undefined, THeaders extends BaseSchema<unknown, unknown> | undefined = undefined, TRequest extends BaseSchema<unknown, unknown> | undefined = undefined, TMultipart extends BaseSchema<unknown, unknown> | undefined = undefined> = {
+    readonly query?: TQuery;
+    readonly headers?: THeaders;
+    readonly request?: TRequest;
+    readonly multipart?: TMultipart;
+};
+export declare function createRawHandler<TQuery extends BaseSchema<unknown, unknown> | undefined = undefined, THeaders extends BaseSchema<unknown, unknown> | undefined = undefined, TRequest extends BaseSchema<unknown, unknown> | undefined = undefined, TMultipart extends BaseSchema<unknown, unknown> | undefined = undefined, TParams = Record<string, string>, TPlugin = unknown, TServiceConfig = Record<string, unknown>>(_schemas: RawHandlerSchemas<TQuery, THeaders, TRequest, TMultipart>, handler: (ctx: RouteHandlerContext<TParams, SchemaOutput<TQuery, Record<string, unknown>>, SchemaOutput<THeaders, Record<string, string>>, SchemaOutput<TRequest, Record<string, unknown>>, TPlugin, TServiceConfig> & {
+    readonly multipart: SchemaOutput<TMultipart, never>;
+}) => Response | Promise<Response>): RawRouteHandler<TParams, SchemaOutput<TQuery, Record<string, unknown>>, SchemaOutput<THeaders, Record<string, string>>, SchemaOutput<TRequest, Record<string, unknown>>, TPlugin, TServiceConfig>;
+export declare namespace createRawHandler {
+    function forContext<TPlugin = unknown, TServiceConfig = Record<string, unknown>>(): <TQuery extends BaseSchema<unknown, unknown> | undefined = undefined, THeaders extends BaseSchema<unknown, unknown> | undefined = undefined, TRequest extends BaseSchema<unknown, unknown> | undefined = undefined, TMultipart extends BaseSchema<unknown, unknown> | undefined = undefined, TParams = Record<string, string>>(schemas: RawHandlerSchemas<TQuery, THeaders, TRequest, TMultipart>, handler: (ctx: RouteHandlerContext<TParams, SchemaOutput<TQuery, Record<string, unknown>>, SchemaOutput<THeaders, Record<string, string>>, SchemaOutput<TRequest, Record<string, unknown>>, TPlugin, TServiceConfig> & {
+        readonly multipart: SchemaOutput<TMultipart, never>;
+    }) => Response | Promise<Response>) => RawRouteHandler<TParams, SchemaOutput<TQuery, Record<string, unknown>>, SchemaOutput<THeaders, Record<string, string>>, SchemaOutput<TRequest, Record<string, unknown>>, TPlugin, TServiceConfig>;
+}
+export {};
+//# sourceMappingURL=handler.d.ts.map

package/lib/runtime/handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../src/runtime/handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,KAAK,EAAE,eAAe,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAIhG;;;GAGG;AACH,MAAM,WAAW,cAAc,CAC7B,SAAS,SAAS,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,EAC9C,MAAM,SAAS,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,SAAS,EACnE,QAAQ,SAAS,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,SAAS,EACrE,QAAQ,SAAS,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,SAAS;IAErE,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC;CAC7B;AAID,+EAA+E;AAC/E,KAAK,YAAY,CACf,CAAC,SAAS,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,SAAS,EAClD,QAAQ,IACN,CAAC,SAAS,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC;AAEjE,qEAAqE;AACrE,KAAK,mBAAmB,CACtB,QAAQ,SAAS,cAAc,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAC5E,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAChC,OAAO,GAAG,OAAO,EACjB,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IACtC,mBAAmB,CACrB,OAAO,EACP,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EACxD,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EACzD,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAC1D,OAAO,EACP,cAAc,CACf,CAAC;AAIF;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,aAAa,CAC3B,SAAS,SAAS,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,EAC9C,MAAM,SAAS,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,SAAS,EACnE,QAAQ,SAAS,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,SAAS,EACrE,QAAQ,SAAS,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,SAAS,EACrE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAChC,OAAO,GAAG,OAAO,EACjB,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAExC,OAAO,EAAE,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAC9D,OAAO,EAAE,CACP,GAAG,EAAE,mBAAmB,CAAC,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,CAAC,KAC9G,KAAK,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,GAChD,YAAY,CACb,OAAO,EACP,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAC7C,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAC9C,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAC/C,KAAK,CAAC,SAAS,CAAC,EAChB,OAAO,EACP,cAAc,CACf,CAQA;AAED,yBAAiB,aAAa,CAAC;IAC7B,SAAgB,UAAU,CAAC,OAAO,GAAG,OAAO,EAAE,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC5D,CACtB,SAAS,SAAS,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,EAC9C,MAAM,SAAS,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,SAAS,EACnE,QAAQ,SAAS,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,SAAS,EACrE,QAAQ,SAAS,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,SAAS,EACrE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAEhC,OAAO,EAAE,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAC9D,OAAO,EAAE,CACP,GAAG,EAAE,mBAAmB,CAAC,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,CAAC,KAC9G,KAAK,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,KAC9C,YAAY,CACf,OAAO,EACP,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAC7C,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAC9C,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAC/C,KAAK,CAAC,SAAS,CAAC,EAChB,OAAO,EACP,cAAc,CACf,CACF;CACF;AAED,MAAM,MAAM,iBAAiB,CAC3B,MAAM,SAAS,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,SAAS,EACnE,QAAQ,SAAS,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,SAAS,EACrE,QAAQ,SAAS,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,SAAS,EACrE,UAAU,SAAS,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,SAAS,IACrE;IACF,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC;CACjC,CAAC;AAEF,wBAAgB,gBAAgB,CAC9B,MAAM,SAAS,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,SAAS,EACnE,QAAQ,SAAS,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,SAAS,EACrE,QAAQ,SAAS,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,SAAS,EACrE,UAAU,SAAS,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,SAAS,EACvE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAChC,OAAO,GAAG,OAAO,EACjB,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAExC,QAAQ,EAAE,iBAAiB,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC,EACnE,OAAO,EAAE,CACP,GAAG,EAAE,mBAAmB,CACtB,OAAO,EACP,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAC7C,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAC9C,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAC/C,OAAO,EACP,cAAc,CACf,GAAG;IAAE,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC,UAAU,EAAE,KAAK,CAAC,CAAA;CAAE,KACxD,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,GAChC,eAAe,CAChB,OAAO,EACP,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAC7C,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAC9C,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAC/C,OAAO,EACP,cAAc,CACf,CAiBA;AAED,yBAAiB,gBAAgB,CAAC;IAChC,SAAgB,UAAU,CAAC,OAAO,GAAG,OAAO,EAAE,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KACzD,CACzB,MAAM,SAAS,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,SAAS,EACnE,QAAQ,SAAS,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,SAAS,EACrE,QAAQ,SAAS,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,SAAS,EACrE,UAAU,SAAS,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,SAAS,EACvE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAEhC,OAAO,EAAE,iBAAiB,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC,EAClE,OAAO,EAAE,CACP,GAAG,EAAE,mBAAmB,CACtB,OAAO,EACP,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAC7C,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAC9C,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAC/C,OAAO,EACP,cAAc,CACf,GAAG;QAAE,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC,UAAU,EAAE,KAAK,CAAC,CAAA;KAAE,KACxD,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,KAC9B,eAAe,CAClB,OAAO,EACP,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAC7C,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAC9C,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAC/C,OAAO,EACP,cAAc,CACf,CACF;CACF"}

package/lib/runtime/handler.js

@@ -0,0 +1,51 @@
+// -- Factory ----------------------------------------------------------
+/**
+ * Create a type-safe route handler with framework-enforced validation.
+ *
+ * - TypeScript enforces the return type matches `Infer<ResponseSchema>` at compile time.
+ * - At runtime, the response is validated through `schemas.response.parse()` as a safety net.
+ * - The handler's `ctx` is fully typed from the provided schemas - no manual `.parse()` needed.
+ *
+ * @example
+ * ```ts
+ * export const handleGet = createHandler(
+ *   { response: ResponseSchema, query: QuerySchema },
+ *   (ctx) => ({
+ *     greeting: `Hello, ${ctx.query.name}`,
+ *     themeHint: "bootstrap1",
+ *     supports: ["application/json", "text/html"]
+ *   })
+ * );
+ * ```
+ */
+export function createHandler(schemas, handler) {
+    return async (ctx) => {
+        const result = await handler(ctx);
+        // Runtime validation - catches any drift between TypeScript types and actual data.
+        return schemas.response.parse(result);
+    };
+}
+(function (createHandler) {
+    function forContext() {
+        return createHandler;
+    }
+    createHandler.forContext = forContext;
+})(createHandler || (createHandler = {}));
+export function createRawHandler(_schemas, handler) {
+    const raw = (async (ctx) => {
+        const result = await handler(ctx);
+        if (!(result instanceof Response)) {
+            throw new TypeError("createRawHandler handlers must return a Response");
+        }
+        return result;
+    });
+    Object.defineProperty(raw, "__bpRawHandler", { value: true });
+    return raw;
+}
+(function (createRawHandler) {
+    function forContext() {
+        return createRawHandler;
+    }
+    createRawHandler.forContext = forContext;
+})(createRawHandler || (createRawHandler = {}));
+//# sourceMappingURL=handler.js.map

package/lib/runtime/handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler.js","sourceRoot":"","sources":["../../src/runtime/handler.ts"],"names":[],"mappings":"AA4CA,wEAAwE;AAExE;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,aAAa,CAS3B,OAA8D,EAC9D,OAEiD;IAUjD,OAAO,KAAK,EAAE,GAAG,EAAE,EAAE;QACnB,MAAM,MAAM,GAAG,MAAM,OAAO,CAC1B,GAAmH,CACpH,CAAC;QACF,mFAAmF;QACnF,OAAO,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAqB,CAAC;IAC5D,CAAC,CAAC;AACJ,CAAC;AAED,WAAiB,aAAa;IAC5B,SAAgB,UAAU;QACxB,OAAO,aAmBN,CAAC;IACJ,CAAC;IArBe,wBAAU,aAqBzB,CAAA;AACH,CAAC,EAvBgB,aAAa,KAAb,aAAa,QAuB7B;AAcD,MAAM,UAAU,gBAAgB,CAS9B,QAAmE,EACnE,OASiC;IASjC,MAAM,GAAG,GAAG,CAAC,KAAK,EAAE,GAA4D,EAAE,EAAE;QAClF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAoC,CAAC,CAAC;QACnE,IAAI,CAAC,CAAC,MAAM,YAAY,QAAQ,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,SAAS,CAAC,kDAAkD,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAOA,CAAC;IACF,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,gBAAgB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,OAAO,GAAG,CAAC;AACb,CAAC;AAED,WAAiB,gBAAgB;IAC/B,SAAgB,UAAU;QACxB,OAAO,gBAyBN,CAAC;IACJ,CAAC;IA3Be,2BAAU,aA2BzB,CAAA;AACH,CAAC,EA7BgB,gBAAgB,KAAhB,gBAAgB,QA6BhC"}

package/lib/runtime/http.d.ts

@@ -0,0 +1,13 @@
+import { type HtmlRenderable } from "./view.js";
+export type HeaderMap = Headers | Record<string, string | string[] | undefined>;
+export interface BetterPortalHeaderTrustOptions {
+    trustedProxyHeaders?: boolean;
+    cfProxy?: boolean;
+}
+export declare function hostFromHeaderValue(value?: string): string | null;
+export declare function resolveEmbeddedSourceHeader(headers: HeaderMap, options?: BetterPortalHeaderTrustOptions): string | undefined;
+export declare function resolveThemeSourceHeader(headers: HeaderMap, options?: BetterPortalHeaderTrustOptions): string | undefined;
+export declare function resolveEmbeddedHostname(headers: HeaderMap, options?: BetterPortalHeaderTrustOptions): string | null;
+export declare function resolveThemeHostname(headers: HeaderMap, options?: BetterPortalHeaderTrustOptions): string | null;
+export declare function toHtmlString(body: HtmlRenderable): string;
+//# sourceMappingURL=http.d.ts.map

package/lib/runtime/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/runtime/http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,WAAW,CAAC;AAEhD,MAAM,MAAM,SAAS,GAAG,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;AAEhF,MAAM,WAAW,8BAA8B;IAC7C,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AA2CD,wBAAgB,mBAAmB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CA2BjE;AAqBD,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,GAAE,8BAAmC,GAAG,MAAM,GAAG,SAAS,CAYhI;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,GAAE,8BAAmC,GAAG,MAAM,GAAG,SAAS,CAU7H;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,GAAE,8BAAmC,GAAG,MAAM,GAAG,IAAI,CAEvH;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,GAAE,8BAAmC,GAAG,MAAM,GAAG,IAAI,CAEpH;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,cAAc,GAAG,MAAM,CAEzD"}